dataset/seed/unbound/templates/risotto.conf

34 lines
1.1 KiB
Text

#RISOTTO: do not compare
server:
{% for interface in general.network.interfaces_list %}
interface: {{ general.network['interface_' + interface|string]['ip_eth' + interface|string] }}
{% endfor %}
do-ip4: yes
do-ip6: no
use-syslog: yes
{% for interface in general.network.interfaces_list %}
access-control: {{ general.network['interface_' + interface|string]['ip_eth' + interface|string] }} allow
{% endfor %}
{% for authority in general.dns_resolver.forward_zones.unbound_forward_address %}
access-control: {{ authority.unbound_allowed_client }} allow
{% endfor %}
do-not-query-localhost: no
auto-trust-anchor-file: "/srv/unbound/root.key"
remote-control:
control-interface: 127.0.0.1
{% for authority in general.dns_resolver.forward_zones.unbound_forward_address %}
{% for zone in authority.unbound_forward_zones %}
forward-zone:
name: "{{ zone }}"
forward-addr: {{ authority.unbound_allowed_client }}
{% endfor %}
{% endfor %}
forward-zone:
name: "."
{% for forward in general.dns_resolver.unbound_default_forwards %}
forward-addr: {{ forward }}
{% endfor %}
# forward-first: no